Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hy6d_wnJ0FlfJLLqiI11eqwtP4A.roa
File: Hy6d_wnJ0FlfJLLqiI11eqwtP4A.roa (raw, json)
Hash identifier: k6OZ+RmD5+ReiPZfC9iwJua8hN2IuM1vIISA2b+BG2o=
Subject key identifier: 1F:2E:9D:FF:09:C9:D0:59:5F:24:B2:EA:88:8D:75:7A:AC:2D:3F:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184C314085F888E3D953068F293E42C9785
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hy6d_wnJ0FlfJLLqiI11eqwtP4A.roa
Signing time: Tue 29 Nov 2022 11:09:40 +0000
ROA not before: Tue 29 Nov 2022 11:09:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:14:08:5f:88:8e:3d:95:30:68:f2:93:e4:2c:97:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 29 11:09:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f2e9dff09c9d0595f24b2ea888d757aac2d3f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:21:b5:81:76:11:cc:0e:95:d0:d5:72:73:c3:
50:5f:c3:f6:15:1c:4e:4b:1a:cf:56:3b:30:ef:ee:
33:06:4f:c4:1c:bd:6e:0c:fa:0c:41:ae:c9:63:5f:
0b:e5:61:fb:cc:bc:d8:3a:4c:57:52:de:fe:4a:8d:
2d:41:26:e6:90:45:88:3e:9d:35:22:8d:3a:02:81:
41:6b:75:92:5a:5d:8b:f4:3b:30:4b:ea:c6:85:e3:
53:78:07:17:8e:6c:6f:03:3a:aa:08:46:a2:d6:9a:
92:07:cc:86:fb:c9:5a:4e:15:b5:19:60:55:c1:df:
97:9a:b0:a7:4d:fe:5e:a7:bf:b5:64:4b:ec:dc:a1:
2e:cd:75:7b:f1:21:7e:73:1b:64:ac:ac:16:2a:53:
db:cd:e4:e0:f3:b1:f0:2a:76:85:a8:61:67:01:40:
cc:5d:d5:9b:08:dd:21:c0:ad:5b:c4:50:07:e6:3f:
b0:33:6b:35:5a:24:8e:d0:ea:8d:aa:6d:51:d7:f5:
58:a2:0f:bb:16:e4:1c:32:4e:ea:db:1e:d6:b5:ca:
6c:87:d1:e8:74:5b:2b:9b:ce:15:2b:95:b7:50:21:
12:ed:e4:5e:18:79:e7:ce:43:77:e9:5f:ea:34:97:
1e:e3:e8:6d:73:a8:11:c6:ea:b0:52:b6:7a:34:cf:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2E:9D:FF:09:C9:D0:59:5F:24:B2:EA:88:8D:75:7A:AC:2D:3F:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hy6d_wnJ0FlfJLLqiI11eqwtP4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:01:c6:9d:af:b9:22:d6:f4:4b:ee:d7:e7:5a:eb:4f:d2:63:
77:48:60:c4:29:e6:b1:00:9e:11:86:22:e4:3d:2d:b1:97:10:
b6:67:54:1c:da:8b:55:eb:8e:6c:de:89:1a:be:8c:a9:0b:4a:
65:f1:76:1c:97:f0:ae:7a:68:cc:ea:f2:80:0b:6d:18:1e:4d:
2b:78:a3:a1:8e:dc:8f:46:2e:88:e1:87:bd:92:a9:19:04:18:
f5:0d:da:74:98:81:e8:90:9d:e3:8b:cc:f0:20:14:44:64:0a:
e6:aa:e4:76:50:8e:36:c5:8e:e6:89:a9:b8:c0:7f:eb:42:ab:
20:a1:8f:58:e0:bc:97:9c:fc:cc:8c:a8:7e:2e:c3:4d:01:96:
d8:4d:67:ab:8c:03:25:1e:11:d5:da:ab:61:b7:94:26:4c:17:
5f:c8:f6:5a:48:bc:bc:b9:5e:e7:5c:f6:4c:23:95:74:c0:38:
5e:c0:32:5c:b2:e8:94:00:02:15:23:f4:51:bf:83:83:3a:63:
8f:29:de:c1:91:f6:11:ce:0d:af:5c:22:8c:e4:15:e0:db:ed:
65:cc:66:8c:92:07:cc:22:f2:08:1b:59:62:58:0f:fa:50:7a:
ac:e8:d9:89:17:b3:c8:34:ea:58:d9:93:61:21:e9:a7:db:3d:
06:71:16:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:41:17 2025 by rpki-client